Cisco NetFlow (cflow)

Table 39. Cisco NetFlow (cflow)

FieldField NameTypeDescription
cflow.aggmethodAggMethodUnsigned 8-bit integerCFlow V8 Aggregation Method
cflow.aggversionAggVersionUnsigned 8-bit integerCFlow V8 Aggregation Version
cflow.countCountUnsigned 16-bit integerCount of PDUs
cflow.dstaddrDstAddrIPv4 addressFlow Destination Address
cflow.dstasDstASUnsigned 16-bit integerDestination AS
cflow.dstmaskDstMaskUnsigned 8-bit integerDestination Prefix Mask
cflow.dstportDstPortUnsigned 16-bit integerFlow Destination Port
cflow.engine_idEngineIdUnsigned 8-bit integerSlot number of switching engine
cflow.engine_typeEngineTypeUnsigned 8-bit integerFlow switching engine type
cflow.flagsExport FlagsUnsigned 8-bit integerCFlow Flags
cflow.flowsFlowsUnsigned 32-bit integerFlows Aggregated in PDU
cflow.inputintInputIntUnsigned 16-bit integerFlow Input Interface
cflow.nexthopNextHopIPv4 addressRouter nexthop
cflow.octetsOctetsUnsigned 32-bit integerCount of bytes
cflow.outputintOutputIntUnsigned 16-bit integerFlow Output Interface
cflow.packetsPacketsUnsigned 32-bit integerCount of packets
cflow.protocolProtocolUnsigned 8-bit integerIP Protocol
cflow.routerscRouter ShortcutIPv4 addressRouter shortcut by switch
cflow.samplerateSampleRateUnsigned 16-bit integerSample Frequency of exporter
cflow.sequenceFlowSequenceUnsigned 32-bit integerSequence number of flows seen
cflow.srcaddrSrcAddrIPv4 addressFlow Source Address
cflow.srcasSrcASUnsigned 16-bit integerSource AS
cflow.srcmaskSrcMaskUnsigned 8-bit integerSource Prefix Mask
cflow.srcnetSrcNetIPv4 addressFlow Source Network
cflow.srcportSrcPortUnsigned 16-bit integerFlow Source Port
cflow.sysuptimeSysUptimeUnsigned 32-bit integerTime since router booted (in milliseconds)
cflow.tcpflagsTCP FlagsUnsigned 8-bit integerTCP Flags
cflow.timeendEndTimeTime durationUptime at end of flow
cflow.timestampTimestampDate/Time stampCurrent seconds since epoch
cflow.timestartStartTimeTime durationUptime at start of flow
cflow.tosIP ToSUnsigned 8-bit integerIP Type of Service
cflow.unix_nsecsCurrentNSecsUnsigned 32-bit integerResidual nanoseconds since epoch
cflow.unix_secsCurrentSecsUnsigned 32-bit integerCurrent seconds since epoch
cflow.versionVersionUnsigned 16-bit integerNetFlow Version